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Quantum low-density parity check (LDPC) codes such as generalized toric codes with finite rate 
suggested by Tillich and Zemor offer an alternative route for quantum computation. Here, we study 
LDPC codes and show that any family of LDPC codes, quantum or classical, where distance scales 
as a positive power of the block length, has a finite error threshold. Based on that, we conclude 
that quantum LDPC codes, for sufficiently large quantum computers, can offer an advantage over 
the toric codes. 
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A practical implementation of a quantum computer 
will rely on quantum error correction (QEC) [IH3] due to 
the fragility of quantum states. There is a strong belief 
that surface (toric) codes [U [5] can offer the fastest route 
to scalable quantum computer due to the error thresh- 
old exceeding 1% and locality of required gates [BHS]. 
Unfortunately, in the nearest future, the surface codes 
(in fact, any two-dimensional codes with local stabilizer 
generators [5]) can only lead to proof of the principle re- 
alizations as they encode a limited number of qubits (k) , 
making a practical implementation of a useable quantum 
computer expensive in terms of the required number n of 
physical qubits (e.g. 220 million physical qubits are nec- 
essary for a useful realization of Shor's algorithm [TU]). 

A large family of quantum low-density parity-check 
(LDPC) codes (a non-local generalization of toric codes) 
has been constructed by Tillich and Zemor [TTj. These 
quantum hypergraph-product codes (QHPCs) contain 
families of CSS codes with finite asymptotic rate R=k/n 
which substantially improves upon toric codes where R = 
(see Fig. [TJ . This construction can also be modified to 
generalize the rotated toric codes[T2] (e.g., checkerboard 
codes) with a finite-factor rate improvement [T5] . Just as 
for the toric codes, the distance of QHPCs scales as a 
square root of the block length, d cx n 1 / 2 . 

In general, removing the restriction of locality should 
considerably improve the code parameters. Non-local 
two-qubit gates are relatively inexpensive with floating 
gates [13], superconducting and trapped- ion qubits, as 
well as more exotic schemes with teleportation |15fl2"0"] . 
Thus, one can consider a much wider class of quantum 
LDPC codes[2TJ[22] for which, compared to general quan- 
tum codes, each quantum measurement involves fewer 
qubits, measurements can be done in parallel, and also 
the classical processing can be enormously simplified. 

Furthermore, at sufficiently large blocklength, a fault 
tolerant family of quantum LDPC codes with a finite 
asymptotic rate will require fewer physical qubits com- 
pared to a realization based on copies of toric code. 
Achieving small computational error requires use of codes 
with large blocklength, thus, realization of a quantum 
computer based on a finite-rate quantum LDPC code can 




FIG. 1. (Color online) Left: Two stabilizer generators 
(marked by arrows) and two pairs of anticommuting logical 
operators (marked by lines) of a [[450,98,5]] code in Eq. 
formed by circulant matrices T-L\ — T-L 2 with the first row 
[1, 1, 0, 1, 0, 0, 0, 1, . . . 0] (red - X operators, blue - Z opera- 
tors, green - overlap of Z and X operators, dark and light gray 
- dual sublattices of physical qubits). Other stabilizer gener- 
ators are obtained by shifts over the same sublattice with pe- 
riodic boundaries. Shaded regions: each gray square uniquely 
corresponds to a pair of logical operators, thus 98 encoded 
logical qubits. Right: same for the toric code [[450,2, 15]]. 



reduce the required number of physical qubits. Unfortu- 
nately, the parameters as well as fault tolerance of general 
quantum LDPC codes are largely unexplored. 

In this Letter, we discuss error-correction properties 
and fault-tolerance of families of finite-rate quantum (and 
where noted classical) LDPC codes whose relative dis- 
tance 8 = d/n tends to zero in the limit of large block- 
length. Even though we term such codes as "bad" (as 
good codes should have finite rate and finite relative dis- 
tance d/n, see Ref. [33]) these are the best finite-rate 
quantum LDPC codes with explicitly known distance. 
For random uncorrelated (qu)bit errors (e.g., quantum 
depolarizing channel), we establish the existence and 
give a lower bound for the single (qu)bit error rate be- 
low which the decoding with probability one is possible, 
and analyze the scaling of successful decoding probability 
with the blocklength. This result is obtained by separat- 
ing errors into small independent clusters on a graph, a 
construction analogous to the cluster theorem [23] • We 



2 



also give related bounds for fault-tolerant operation in 
the presence of syndrome measurement errors. A sim- 
ilar analysis for errors when the erroneous (qu)bits are 
known (erasure channel) allows us to establish an upper 
limit for the achievable rate of a quantum LDPC code 
with power-law scaling of the distance with blocklength. 
These results are important since, unlike for regular QEC 
codes, there are very few general lower (existence) or up- 
per bounds for quantum LDPC codes p5]. 

Definitions. A binary linear code C with parameters 
[n, k, d] is a fc-dimensional subspace of the vector space 
F 2 of all binary strings of length n. Code distance d is 
the minimal weight (number of non-zero elements) of a 
non-zero string in the code. A linear code is uniquely 
specified by the binary parity check matrix H, namely 
C = {c e F 2 \Hc = 0}, where operations are done mod 2. 

A quantum \{n, k, d}] (qubit) stabilizer code Q is a 2 fe - 
dimensional subspace of the n-qubit Hilbert space Wf n , a 
common +1 cigenspace of all operators in an Abelian sta- 
bilizer group 5? C S? n , — 1 ^ , where the n-qubit Pauli 
group 3? n is generated by tensor products of the X and 
Z single-qubit Pauli operators. The stabilizer is typically 
specified in terms of its generators, y = (Si, . . . , S n -k)', 
measuring the generators Si produces the syndrome vec- 
tor. The weight of a Pauli operator is the number of 
qubits it affects. The distance d of a quantum code is 
the minimum weight of an operator U which commutes 
with all operators from the stabilizer S^, but is not a part 
of the stabilizer, U 5? . A code of distance d can detect 
any error of weight up to d — 1, and correct up to [d/2\ . 

A Pauli operator U = i m X v Z u , where v, u G {0, 1}®" 
and X v = X^ 1 X'2 2 ...X%>, Z u = Z'? 1 Z% 2 . . . can 
be mapped, up to a phase, to a quaternary vector, e 
u + cov, where lu 2 = oJ = cu + 1. A product of two 
quantum operators corresponds to a sum (mod 2) of the 
corresponding vectors. Two Pauli operators commute if 
and only if the trace inner product ei *e 2 = e! -e^ + e! -e 2 
of the corresponding vectors is zero, where e = u + wv, 

With this map, generators of a stabilizer group are 
mapped to rows of a parity check matrix H of an addi- 
tive (forming a group with respect to addition but not 
necessarily over the full set of F4 operations) code over 
F4, with the condition that the trace inner product of any 
two rows vanishes |26|. The vectors generated by rows of 
H correspond to stabilizer generators which act trivially 
on the code; these vectors form the degeneracy group and 
are omitted from the distance calculation. For a more 
narrow set of Calderbank-Shor-Steane (CSS) codes the 
parity check matrix is a direct sum H = G x © wG 2 , and 
the commutativity condition simplifies to G X G^ = 0. 

A LDPC code, quantum or classical, is a code with a 
sparce parity check matrix. For a regular (j, I) LDPC 
code, every column and every row of H have weights j 
and I respectively, while for a (j, ^-limited LDPC code 
these weigths are limited from above by j and I. 

The QHPCs QI] (Fig. ^ are constructed from two bi- 



nary matrices, Hi (dimensions n x m) and "H 2 (dimen- 
sions r 2 x 712), as a CSS code with the stabilizer |13j 

G X = (E 2 ®H 1 ,H 2 ®E 1 ), 

G z = (Ul ®E 1 ,E 2 ®Ul). [ ' 

Here each matrix is composed of two blocks constructed 
as Kronecker products (denoted with "(g)"), and Ei and 
Ei, i = 1,2, are unit matrices of dimensions given by 
Ti and rii, respectively. In the original constructional), 
given the binary parity check matrix Hi = of 
an (h, «)-limited classical LDPC code [n c ,k c ,d c ], the 
QHPC is a CSS code with the parameters [[n = 
n 2 + (n c — k c ) 2 ,k — k 2 ,d = d c }], and column and row 
weights limited by j < max(fe, v), £ < h + v. An original 
classical LDPC code produces a quantum LDPC code, 
and the corresponding distance scales as d cx n 1 / 2 . 

OUR key observation is that for LDPC codes, quan- 
tum or classical, large-weight errors are mostly those 
composed of disjoint small-weight clusters that can be 
detected or corrected independently. Indeed, e.g., for a 
regular (j, t) LDPC code, two random (qu)bits have non- 
zero values in the same row with probability z/n, where 
z = (I — Correcting any of such disjoint errors does 
not affect the syndrome for the others. 

More generally, for a (j, ^-limited LDPC code, we rep- 
resent all (qu)bits as nodes of a graph Qi of degree at 
most z: two nodes are connected by an edge iff there is 
a row in the parity check matrix which has non-zero val- 
ues at both positions. An error with support in a subset 
£ C V(Q\) of the vertices defines the subgraph Gi(£) in- 
duced by £. Generally, we will not make a distinction 
between a set of vertices and the corresponding induced 
subgraph. In particular, a (connected) cluster in £ cor- 
responds to a connected subgraph of Gi(£)- Different 
clusters affect disjoint sets of rows of the parity check 
matrix. This implies the following 

Lemma 1. For a distance-d LDPC code, any error 
whose support is a union of disconnected clusters on Q\ 
of weight w-i < d, is detectable. 

In the case of an erasure channel (quantum or classi- 
cal), we actually know which (qu)bits are affected. In 
known locations, a code of distance d can correct all er- 
rors of weight d — 1 or smaller. Therefore, correcting 
clusters one-by-one, we can guarantee success if all the 
clusters have weights Wi < d. It is then obvious that 
the problem of error correction for an erasure channel is 
related to the problem of site percolation on graphs [2"T]. 

For any (j, i)-hmited LDPC code, the vertices of the 
graph Gi have degrees at most z = (£—l)j. In what fol- 
lows, we will need the cluster size distribution [the prob- 
ability ni P ' (x) that the point a; is a member of a cluster 
of size s] below the percolation threshold. Although one 
expects exponential tail in the cluster size distribution, 
n s (p) < exp(—sg(p)) for all s > so and some g(p) > 
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and so > 0, this can be violated for sufficiently heteroge- 
neous graphs [28]. Restricting the range of p, we have the 
following lemma: 

Lemma 2. For any graph Q with vertex degrees limited 
by z, the site- or bond- percolation cluster size distribution 
has exponential tail for p < p = (z — 1) _1 . 

Proof. A size-s cluster containing x on Q, after cutting 
any loops, can be mapped to a size-s cluster on z-regular 
tree T z (Bethe lattice), with x mapped to the root. 
Such a mapping can only increase the perimeter (size 
of the boundary, i.e., number of sites outside the clus- 
ter but neighboring with a site inside it). Any size-s 
cluster on T z has the perimeter t z (s) = s(z — 2) + 2; 
for a cluster on Q we have t < t z (s). Let us now use 
the standard expression for the cluster size distribution, 

n{ p \x) = J2t a s,t( x )P s (^ ~ P)*i where a s ,t(x) > is the 
number of x-containing site-percolation clusters of size s 
and perimeter t. For p < po, 



(i-pY < (i-po) 



t (i-p)'* (s) 



(2) 



which gives the exponential tail 



Po(l -Po) z 



since a z {p) < 1 for p < p Q and ni Po ^ < 1 



dcf 



(3) 
□ 



Notice that the threshold for exponential tail coincides 
with the lower boundary of the (bond) percolation transi- 
tion for degree- limited graphs [29 ], which is also the lower 
boundary for the site percolation transition 30 ; both 
boundaries are achieved on z-regular tree J~ z . 

We can now formulate the following 

Theorem 1. For an infinite family of (j,l)-limited 
LDPC codes, quantum or classical, where the distance d 
scales as a power law at large n, d > An a , with some 
a > and A > 0, asymptotically certain recovery is 
possible for (qu)bit erasure probabilities p < p e , where 
Pe > Po = (z — 1) and z = (£— X)j. A non-zero thresh- 
old p e also exists for such code families with the distance 
scaling logarithmically at large n, d> A^lrm. 

Proof. The conditions match those of Lemmas [l] and [2] 
For p < po, we just need to ensure that the probability 
to find a cluster of size s > d anywhere on Qi vanishes 
at large n, i.e., ^X) s >d n s P V s — * 0- The sufficient condi- 
tion on the distance is d > lnn/| lna z |, which is always 
the case at large n with power-law distance, and gives 
&z(p) < e~ A ° with logarithmically increasing distance. 
The latter equation is satisfied for small enough p by 
continuity of a z (p) since a z (0) — 0. □ 



Given the upper limit on the rate of stabilizer codes in 
Theorem 3.8 of Ref. [25J we also obtain the limit on the 
rate of quantum codes in Theorem [T] 

Corollary 2. Any family of (j,£) -limited LDPC quan- 
tum codes with power-law scaling of the minimum dis- 
tance with the blocksize n, has rate R limited by 



R<l-2 



z - 1 - (z - 3) 



z-2 
z- 1 



(4) 



The situation gets a bit more complicated for the depo- 
larizing channel (memoryless binary symmetric channel 
in the classical case), where the positions of the errors 
are unknown. A bound on single-(qu)bit error probabil- 
ity which guarantees almost certain error correction for 
large codes is given by 

Theorem 3. For an infinite family of (j,l)-limited 
LDPC codes, quantum or classical, where the distance 
d scales as a power law at large n, asymptotically certain 
recovery is possible for (qu)bit depolarizing probabilities 
P < Pd > Pi, where 4pi(l - p x ) = - p ) 2{z ~ 2) < 
[e(z — 1)]~ 2 , Pi < 1/2, and e is the base of the natu- 
ral logarithm. A threshold pd > also exists for code 
families with distance scaling logarithmically at large n. 

Proof. The clusters can be irrecoverably misidentified 
only if there exists a set of s > d connected vertices 
on Qx with m > [s/2] errors. We will call such sets 
violating (s,m)-sets. To estimate the probability of en- 
countering such a set, we notice that an (s,m) set with 
an additional error at the perimeter can be extended to 
become an (s + 1, m + 1) set. Thus, one only needs to 
count connected sets of size s > d, with perimeter free 
of errors. For s > d, the probability nf^ (x) that one of 
violating (s,m) sets includes the point x, can be limited 
as h^lx) < fs P \x), where 



t 



a sl 



P m (l-p) 



s— m+f 



(5) 



The sum over m can be limited by 2 s p s / 2 (l — p) s / 2+t , 
which gives a bound in terms of the regular cluster size 
distribution, /j p) < [4{l-p)/p] s / 2 n'f\x). Using Eq. 
we have the condition 4(1 —p)/pa 2 z < 1 to have exponen- 
tial tail for hf (x). This condition is satisfied for p < p\. 
The rest of the proof follows that of Theorem [T] □ 

Note that this bound is rather loose as there are many 
sets which differ just by error-free regions. We believe 
a more accurate general bound should be a factor of e 2 
larger, pi = [2(z — 1)]~ 2 , as can be obtained by counting 
chains on a z-regular tree (to reduce multiple counts). 

We should also note that the threshold in Theorem [3] 
corresponds to maximum-likelihood (ML) decoding and 
is not related to a particular decoder, as is commonly 
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done for LDPC codes. For a practical approach, one 
can identify the putative clusters by first adding all non- 
zero positions in a parity-check row corresponding to a 
non-zero syndrome element, then at each step adding up 
to £ — 1 positions from each of the non-zero-syndrome 
rows which include (qu)bit(s) already in the cluster. A 
corrected cluster can be dropped [Theorem [3] ; putative 
clusters which cannot be corrected individually need to 
be joined with one or more such cluster(s) nearby. Below 
the percolation threshold the actual clusters will typically 
have size of order s < lnn/|lna z |. For p < p\ [Theo- 
rem [3] , at large n the number N of classical operations 
for exhaustive search of the correct error configuration 
in each cluster will scale almost linearly with n, namely, 
N ~ pnq s ~ p n i+inq/ in z ^ w h ere q — 2 for a binary clas- 
sical and q = 4 for a quantum code. 

So far our discussion has been limited to idealized 
performance of the code, which assumes that the syn- 
drome is measured perfectly. With qubit measurement 
errors, LDPC codes suddenly appear at a disadvantage, 
as a single-qubit error accompanied by the errors of some 
of the stabilizer generators (up to j) which involve this 
qubit, could remain undetected. In other words, the ef- 
fective distance to such combined errors cannot exceed 
the minimum column weight plus one. In order to pre- 
vent errors from spreading, either we have to keep the 
measurement error small, or we have to combine the in- 
formation from different syndrome measurement cycles. 
To help with the bookkeeping, we constructed an auxil- 
iary classical code combining different time slices. The 
code is based on the parity-check matrix of the origi- 
nal code, and the repetition codes (in the simplest case) 
for each measured syndrome[3T]. This generalizes the 
auxiliary three-dimensional gauge model used in the de- 
coding of the surface codes [5 . The corresponding graph 
Qi has up to 2j additional neighbors per qubit, which 
corresponds to possible syndrome measurement errors 
in the two neighboring layers. The percolation prob- 
lem works similarly to that with perfect measurements. 
Overall, the analysis in Theorem [3] can be repeated with 
z — > z' = j(£ + 1), which in the case of isotropic er- 
ror probability p — p mcas gives a finite lower bound 
P > [2e(z' — 1)]~ 2 for such fault-tolerant measurements. 

Of course, combining repeated syndrome measure- 
ments is only part of the story of fault-tolerant implemen- 
tation of a code. We implicitly assumed that the hard- 
ware allows for parallel measurement of non-overlapping 
stabilizer generators, that this can be done in fixed time 
even though the corresponding qubits may not necessar- 
ily lie next to each other, and also that all gates are done 
fault-tolerantly [35], so that errors do not spread. With 
these assumptions, the full syndrome can be measured 
in approximately z steps, which would take bounded 
time independent of the size of the code. Further, fault- 
tolerant operation also implies some implemetation of 
logical operators, e.g., as suggested in Ref. [331 



Our results apply to QHPCs and related codes fTTlfTB] . 
As an example, let us start with a random regular (h, v) 
LDPC code Hi = H2, with h < v. The rate of such a 
code is fixed, R c = k c /n c = 1 — h/v. With high proba- 
bility at large n c , the code will have the relative distance 
in excess of 5 C which satisfies the equation[3~4"] 

H(S c ) + {l-R c )p v (R c ,S c )<0. (6) 

Here H(5 C ) = — S c In S c — (I — S c ) ln(l — S c ) is the natural 
entropy, and p v (R c , S c ) = In [(I + y) k /2 + (1 - y) k /2] - 
5 c vhiy — vH(S c ) with y being the only positive root of 
(1 + yf- 1 + (1 - y) k ~ l = (1 — S c ) [(1 + y) k + (I - y) k ] . 
Such [n c , fe c , d c ] codes produce QHPCs ([I]) which are reg- 
ular (v, v + h) LDPC codes [z — v(v + h — 1)] with 
the asymptotic rate R = k/n = (y — h) 2 /(h 2 + v 2 ) 
and the distance scaling as d/y/n — S c v j\Jh 2 + v 2 where 
8 C = S c (v,h) satisfies Eq. For sufficiently large n, 
all errors can be corrected with certainty for single-qubit 
error probabilities below p\ , see Theorem [3] Suppose 
we need to maintain quantum information for Af QEC 
cycles with a fault probability less than Pf. We can 
crudely estimate the minimal required blocklength from 
equation Pf = MA4fj i p \x)d/n where M. is the number 
of syndrome measurements per QEC cycle {M. — 2 for 
toric code and M = 2v(v + h - I) for QHPC). Taking 
P f /M = 10" 9 , we obtain that QHPCs [[n, n/25, 0.09y/n\] 
(y = 4, h = 3) should have at least 30000 physical (1200 
logical) qubits which is less than in fc/2 copies of toric 
code. More careful estimates for the failure probability 
should lead to fewer required physical qubits for QHPCs. 

In conclusion, we established a sufficient condition 
for an LDPC code family with asymptotically vanishing 
relative distance to have a finite probability threshold 
to correct all errors with certainty, including the case 
of syndrome measurement errors. The result is simple: 
any LDPC code family with power-law scaling of the dis- 
tance with the block size has a finite threshold, see The- 
orem [3] Existence of such a threshold is one of neces- 
sary conditions for achieving fault-tolerance in a quan- 
tum computer, and it should facilitate search for new 
efficient quantum codes with less stringent requirements 
on the number of physical qubits. In particular, we estab- 
lished the existence of such a threshold for the finite-rate 
quantum LDPC codes constructed in the framework of 
QHPCsQTl H3]. According to our estimates, QHPCs re- 
quire lower error threshold compared to toric codes while 
using fewer physical qubits at large code blocklength. 

In application to subsystem codes [35l [36], we can 
guarantee the existence of a finite threshold only in the 
case where the actual stabilizer group (as opposed to the 
gauge group) has generators of limited weight. This is 
the case, e.g., for color codes [37], but is not generally 
the case for Bacon-Shor codes and their generalizations, 
see, e.g., Ref. I3"51 

We have also established the existence of a related 
threshold when the erroneous (qu)bits are known (era- 
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sure channel) (Theorem [I]), which resulted in an upper 
bound for the rate of quantum LDPC codes [see Eq. Q]. 
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part by the U.S. Army Research Office under Grant No. 
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